Subject: How to enable SSL on an ADLDS instance running on Windows 7
Author: eLDAP
Posted on: 11/10/2012 07:30:47 PM
Why does the damn SSL matter? It is required by ADLDS/ADAM for certain scenarios, for example, when you want to change the password over LDAP, like using Ldp.exe or Ldifde.exe.
First of all, you need a server certificate for ADLDS to run on SSL port. By saying that, the certificate must be marked for Server Authentication in the Intended Purposes.
There are basically two types of certificate: self-signed certificate and CA-issued certificate. There are various utility tools to generate a certificate like selssl.exe or certreq.exe but all of them require a lot of server resource like IIS, Domain Controller, or CA Authority. For a stand alone ADLDS instance running on an isolated computer, you can get certificate and CA all done by makecert.exe.
Note: The SSL requirement can be relaxed though by following the link: How to disable SSL secure connection requirement for password operation
Replies:
References:
